Information Security Magazine

A critical AWS CodeBuild misconfiguration has exposed core repositories to potential attack

IANS Research reveals a growth in executive-level CISO titles, amid resource challenges

ISACA’s State of Privacy 2026 report reveals that data privacy teams remain understaffed and underfunded, despite growing regulatory demands and rising technical privacy challenges

DDoS-ers are striking a website linked to a data breach at the Department of Homeland Security

RedVDS cyber-crime-as-a-service platform powering phishing, BEC attacks and other fraud has cost victims millions

Phishing attacks have been identified using fake PayPal alerts to exploit remote monitoring and management tools

A new DeadLock ransomware operation uses Polygon blockchain smart contracts to manage proxy server addresses

The financial sector should finalize its post-quantum cryptography transition circa 2034, G7 cyber experts said

Microsoft has patched three zero-day vulnerabilities in the first patch Tuesday of 2026, including one under active exploitation

Chainalysis estimates $17bn will be lost to crypto scams in 2025 as AI takes hold

A high-severity security flaw in the Gogs Git service is being actively exploited, leading to remote code execution

SHADOW#REACTOR is a multi-stage Windows malware campaign that stealthily deploys the Remcos RAT using complex infection techniques

Cybersecurity researchers issue warning over a surge in attacks designed to trick Facebook users into handing over login credentials

Detected by Check Point researchers, VoidLink is a sophisticated malware framework that can be used to implant malware in the most common cloud environments

Lawmakers want the security industry to help them scrutinize the Cyber Security and Resilience Bill

Silent Push has discovered a new Magecart campaign targeting six major payment network providers that has been running since 2022

Researchers at Palo Alto’s Unit 42 have outlined a list of recommended security controls for vibe coding tools

US agency CISA has retired ten Emergency Directives issued between 2019 and 2024, marking a new step in managing federal cyber-risk

California privacy regulator, the CPPA, is cracking down on data brokers trading personal data without authorization

“Pervasive” threat of phishing, invoice scams and other cyber-enabled fraud is at “record highs”, warns WEF Cybersecurity Outlook 2026